Company #20
October 11, 2026
•[ ransomware, retail ]
Company #20 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. cannabis operator Michigan, USA | [PENDING EXPOSURE: data publishes 2026-10-13 09:40 UTC]
Company #21
October 11, 2026
•[ ransomware, healthcare ]
Company #21 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. neurology practice New South Wales, Australia | [PENDING EXPOSURE: data publishes 2026-10-13 12:37 UTC]
Canadian Mennonite University (CMU)
October 12, 2026
•[ ransomware, education ]
Canadian Mennonite University (CMU) was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Education. Country: Canada. Website: cmu.ca. Canadian Mennonite University (CMU) is a Christian institution in Winnipeg, Manitoba, offering undergraduate degrees in various fields such as arts, business, music, and sciences, along with three graduate degree programs. The university focuses on a small community environment that fosters academic, social, and spiritual growth, welcoming students from diverse backgrounds and beliefs. CMU emphasizes preparing students as skilled problem solvers and leaders committed to positive change in their communities and beyond. It offers financial aid and supports approximately 50% of its students through scholarships and bursaries
PIC GROUP, INC
September 15, 2026
•[ ransomware, energy, manufacturing ]
PIC GROUP, INC was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-15. Sector: Other. Country: United States of America. Website: picgroupinc.com. PIC Group, Inc. is dedicated to delivering value by providing Operation & Maintenance, Commissi
oning and Startup, Documentation & Training and Staffing services to the power generation, oil
and gas, petrochemical, pulp and paper and manufacturing industries globally.
We will upload 8gb of corporate data soon. Employee information, projects (drawings, specificat
ions), clients info, contracts and agreements and so on.
April Asia (port agency operations)
October 12, 2026
•[ ransomware, leak ]
April Asia (port agency operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Indonesia. Port agency / logistics Indonesia | Container gate movement and damage management records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Samudera (coastal shipping operations)
October 12, 2026
•[ ransomware, leak ]
Samudera (coastal shipping operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Indonesia. Coastal shipping Indonesia | Charter party records and dangerous-goods operational documentation | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
GCS Kuwait (port community system operations)
October 12, 2026
•[ ransomware, leak, technology ]
GCS Kuwait (port community system operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Kuwait. Port community IT Kuwait | Container movement records and operational EDI archives | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
BNCT Busan New Container Terminal
October 12, 2026
•[ ransomware, leak ]
BNCT Busan New Container Terminal was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Port terminal operations South Korea | Operational EDI archives and internal database scripts | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Tsuneishi / Kambara Kisen (shipbuilding and ship management)
October 12, 2026
•[ ransomware, manufacturing, leak ]
Tsuneishi / Kambara Kisen (shipbuilding and ship management) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: Japan. Shipbuilding / ship management Japan | Operational EDI archives and commercial contract records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Polaris Shipping (dry bulk shipping)
October 12, 2026
•[ ransomware, financial ]
Polaris Shipping (dry bulk shipping) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: South Korea. Dry bulk shipping South Korea | Internal financial records (sales vouchers) and vessel operational reports | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Portonave (container terminal operations)
October 12, 2026
•[ ransomware, leak, manufacturing ]
Portonave (container terminal operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Brazil. Port terminal operations Brazil | Terminal operating system database material and operational EDI archives | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Santos Brasil (port operations)
October 12, 2026
•[ ransomware, transportation ]
Santos Brasil (port operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Brazil. Port terminal operations Brazil | Terminal operating system database scripts and operational records | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
brookslawfirm.com
October 12, 2026
•[ ransomware, leak, healthcare ]
brookslawfirm.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Professional Services. Country: United States of America. Website: brookslawfirm.com. personal data 8200 client hippa etc
Engineers Contractors Fabricators Inc. (ECF)
October 12, 2026
•[ ransomware, manufacturing, financial ]
Engineers Contractors Fabricators Inc. (ECF) was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. Country: United States of America. Website: https:ecfinc.net. ECF, Inc., a piping and insulation contractor specializing in the design and construction of terminals for the transshipment of liquid hydrocarbons such as asphalt, crude oil, and renewable fuels, has completely failed to ensure the security of its systems and is unwilling to compromise. Therefore, we are providing you with access to confidential information (proprietary pipeline designs, CAD drawings, customer lists, pricing models, financial data, employee information, and trade secrets), which violates the Complaints and Abuse Act (CFAA) and state civil liability laws and may result in injunctions, damages, fines, mandatory notices, class actions, loss of competitive advantage, and possibly termination of operations.
Greentech Environmental
October 12, 2026
•[ ransomware, energy, manufacturing ]
Greentech Environmental was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Energy & Utilities. Website: https:greentechenv.com. Greentech Environmental LLC, a manufacturer of air purification systems using patented ODOGard and ARC technologies, has failed to fully secure and address the breach, and therefore we are publishing their confidential information such as (intellectual property/trade secrets, financial statements, employee data, operational/strategic plans, legal documents, corporate governance documents, and manufacturing drawings) that would violate the Defend Trade Secrets Act (CFAA) and state privacy laws, which would subject us to injunctive relief, treble damages, penalties, mandatory notification, class action lawsuits, loss of patent rights and competitive advantage, and possible business failure.
Rechtsanwaltskanzlei Dr. Bien
October 12, 2026
•[ ransomware, leak, finance ]
Rechtsanwaltskanzlei Dr. Bien was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Professional Services. Country: Germany. Website: Rechtsanwaltskanzlei Dr. Bien. [law] Rechtsanwaltskanzlei Dr. Bien a specialist insolvency law firm in Hamm, NRW, appointed as insolvency administrator by 12 Amtsgerichte across Westfalen.
The exposed material includes:
2,387 WinSolvenz case databases each a Microsoft Access MDB containing the complete financial dossier of an insolvency debtor: creditor lists, claim amounts, distribution plans, asset inventories, court appointments, and bank account details.
492+ forced administration (Zwangsverwaltung) case files property addresses, tenant data, rent records, utility accounts, insurance details, court-directed property management reports.
80 GB MailStore email archive the firm's complete email history in MailStoreContainer-v1 format: attorney-client communications, court correspondence, creditor negotiations, debtor disclosures.
1.7 GB beA backup (besonderes elektronisches Anwaltspostfach) three MSSQL database backups containing every electronic communication between the firm and every German court.
35 employee records 25 former + ~10 current staff: contracts, salary, overtime, vacation, pension, disability status, termination agreements.
DATEV tax/accounting archives 33 directories of income tax backups, insolvency accounting, third-party mandates.
RingSide Creative
October 12, 2026
•[ ransomware, technology ]
RingSide Creative was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Professional Services. Country: United States of America. Website: ringsidecreative.com.
AAA Architectural Hardware
October 12, 2026
•[ ransomware, manufacturing ]
AAA Architectural Hardware was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Manufacturing. AAA Architectural Hardware Co. has been a leader in architectural hardware for over 80 years, o
ffering a wide range of products and services including keying systems, electronic security, an
d custom design requests.
We will upload 64gb of corporate data soon. Employee information (name, address and so on), pro
jects, clients and partners info, NDAs and so on.
MarieBelle New York
October 13, 2026
•[ ransomware, retail, healthcare ]
MarieBelle New York was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Retail & E-Commerce. Country: United States of America. confectionery & telehealth (US) New York, USA | Complete QuickBooks company file of a New York confectionery and luxury foods company: every transaction, customer, vendor and payroll record; Complete inventory database with product, cost and supplier data; Telehealth platform files and clinical system records from hospital partner infrastructure | [NOT PAID EXPOSED]
Zenidoc
October 13, 2026
•[ ransomware, healthcare, technology ]
Zenidoc was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Professional Services. a French healthcare software company that helps hospitals and medical professionals automate documentation, transcribe medical dictation, manage patient records, and streamline workflows using AI and voice-recognition technology. Data Content : - 605k Patient Data, Names, Phone, SSN and more. - Zenidoc Cloud Dev, Data, Prod, Support Chats, Source Codes and more.
